VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jan 15, 2026· Updated Jun 17, 2026

CVE-2025-13844

CVE-2025-13844

Description

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.

Affected products

7
  • Schneider Electric/Ecostruxure Power Build Rapsody6 versions
    cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:bel_fr:*:*:*+ 5 more
    • cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:bel_fr:*:*:*range: <=2.8.8
    • cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:bel_nl:*:*:*range: <=2.8.3
    • cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:es:*:*:*range: <=2.8.5
    • cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:fr:*:*:*range: <=2.8.1
    • cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:int:*:*:*range: <=2.8.6
    • (no CPE)range: FR v2.8.1 and prior
  • Schneider Electric/Rapsodyllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.